— No reviews yet
0 installs
9 views
0.0% view→install
Install
$ agentstack add skill-zuoyebang-aiweave-concurrency-review ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Are you the author of Concurrency Review? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claimAbout
审计代码的并发安全性。范围:$ARGUMENTS(空则审计 git diff main..HEAD)。
> 公共步骤模板见 [skills-spec/01skillauthoring_guide.md](path) §A-§E。本 Skill 不生成代码,故第 5 步测试同步不适用。 > > 本 Skill 是 新增的审计类 Skill。"代码 ↔ 约束"一致性审计,与 doc-sync-check(代码 ↔ 文档一致性)互补不替代。
第 0 步:🚫 模块 + 启用状态检查
- 读
BUILD_STATUS.md§0 —— 命中 🚫 模块的文件跳过审计(不报问题) - 读
INDEX.md§0 AIWeave 采纳进度 —— 如docs-spec/20_concurrency_safety标 ⬜ 未启用 → 跳过本 Skill,提示"本工程未启用 20,跳过 concurrency-review"
第 1 步:读取约束源
读以下文件(按顺序):
docs/architecture/concurrency_safety.md—— §2 共享状态注册表 + §3 锁策略 + §4 channel 清单 + §6 危险操作清单docs/architecture/ai_dev_guide.md§10.1 —— grep 锚 rule-id 索引(R-CONC-*)docs/BUILD_STATUS.md§11 —— 约束清单状态轨道(确认哪些 rule-id 启用)
第 2 步:扫描代码范围
按 $ARGUMENTS 确定扫描范围:
- 空:
git diff main..HEAD --name-only取新增/修改的 .go 文件 - 文件路径:直接以该路径为范围
- service 模块:
service/{module}/**/*.go
第 3 步:10 项 grep 锚检查
> grep 锚定位为"信号级"非"判定级"。所有命中标 🟡 待复核;最终判定由人工 reviewer 决定是否阻断合并。
检查 R-CONC-LOCK-IO:锁内做网络 IO
grep 模式:'\.Lock\(\)[\s\S]{0,500}?(http\.|Mysql|Redis|tlog\.)'
误报排除:
- RLock 中读小对象
- 同步只读类操作(如 Redis GET 单次 🧩 **AIWeave 骨架 · 作者 XuRuibo** · Apache-2.0 · 模板文件,复制到工程后按业务语义填充
## Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- **Author:** [zuoyebang](https://github.com/zuoyebang)
- **Source:** [zuoyebang/aiweave](https://github.com/zuoyebang/aiweave)
- **License:** Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.